ICO: 'Benefitting humanity' no excuse for weak privacy practices

The Information Commissioner's Office has issued a helpful clarification: telling everyone your AI 'benefits humanity' does not, it turns out, exempt you from data protection law. It is a bold stance, in roughly the way that reminding the pub that the smoking ban applies to the beer garden is bold. 'Benefitting humanity' is the phrase every lab staples to the top of every funding announcement, safety framework and open letter, and the ICO has now gently noted that it is not, legally speaking, an instrument. Somewhere a comms team is rewriting 'for the benefit of humanity' to 'for the benefit of humanity, subject to our privacy notice.'

The Commissioner promises to use its 'full regulatory powers' wherever organisations expose people to avoidable harm. Full regulatory powers — a phrase doing a lot of heavy lifting for an office that must simultaneously investigate how data protection law applies to large language models, which is regulator-speak for still working out whether the law reaches the thing at all. The ICO is, in effect, running a seminar on jurisdiction while the industry runs the economy. Meanwhile the political weather blows the other way, with pressure to lighten the load on frontier AI. As we noted recently, the UK would very much like to lead the world on frontier AI safety and would prefer you didn't ask where, precisely, it intends to lead.

None of this is the ICO's fault, exactly. It is being asked to enforce yesterday's privacy law against tomorrow's model while its own political masters audition for the deregulation headline. The 'benefitting humanity' defence will keep being deployed because it costs nothing and polls beautifully. Expect a stern letter, a consultation, and a paragraph beginning 'we take these obligations seriously', followed by the same data collection. The only open question is whether any regulator in Britain still has the appetite — or the arithmetic — to make the phrase cost anything at all.